[mistwang]

If you configure per user php.ini, the global php.ini will be ignored for that user, so it could be a security concern for shared hosting environment as you lost the central control of php.ini.